Privacy and personal data

1. Data controller

Registered name

Medikotürk Medikal Kozmetik Gıda ve İthalat İhracat Anonim Şirketi (short name: Mediko Türk)

Tax office / no.

Tepecik Tax Office · 9251269421

Address

Ömerağa Mah. Cumhuriyet Blv. Gökseller Pasajı No: 85 A, İzmit / Kocaeli, Türkiye

E-mail

onder@medikoturk.com.tr · iletisim@ixvene.com

Phone

+90 544 960 89 35

2. Personal data processed

• Identity and contact: name and surname, phone number, e-mail address (when you write by e-mail)
• Location: city or country
• Request details: selected subject or package, note and message content
• For salon applications: salon name and name of the authorised person

Special categories of personal data (including health data) are not requested; please do not include them in your messages.

3. Purposes

• Responding to pre-orders, salon/distributor applications and contact requests
• Providing information and preparing offers for the requested product or package
• Concluding and performing a contract if the request leads to one
• Complying with legal obligations

4. Method of collection and legal basis

Data is collected electronically: prepared with the site forms and sent by you via WhatsApp, e-mail or phone.

Legal bases: your explicit consent (the consent box in the form) under KVKK Art. 5/1, and processing being directly related to the conclusion or performance of a contract under KVKK Art. 5/2-c. For statutory retention, KVKK Art. 5/2-ç (legal obligation) also applies.

5. Transfers, including transfers abroad

Data is not sold or shared for advertising. It is shared only as needed to deliver and answer your request with:

• WhatsApp (Meta): when you send the message via WhatsApp
• The e-mail service provider: when you send the message by e-mail
• Mediko Türk's office in Dubai (United Arab Emirates): when that office needs to answer the request
• Authorised public authorities: where required by law

The servers of WhatsApp and e-mail services may be located abroad; sharing with the Dubai office is also a transfer abroad. These transfers are based on your explicit consent under KVKK Art. 9. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of earlier processing.

6. Retention period

Requests that do not lead to a contract are kept for up to 1 year after the request is concluded. If a contract is concluded, data is kept for the period required by the Turkish Commercial Code and Tax Procedure Law (generally 10 years). Afterwards, data is deleted, destroyed or anonymised.

7. Your rights under KVKK Art. 11

• To learn whether your personal data is processed
• To request information if it has been processed
• To learn the purpose of processing and whether data is used accordingly
• To know the third parties to whom data is transferred in Türkiye or abroad
• To request correction of incomplete or inaccurate data
• To request deletion or destruction under the conditions of KVKK Art. 7
• To request that corrections, deletions or destructions be notified to third parties to whom data was transferred
• To object to a result against you arising exclusively from automated analysis
• To claim compensation for damage caused by unlawful processing

8. How to apply

You can submit requests, in line with the Communiqué on the Procedures for Applications to the Data Controller:

• by e-mail to onder@medikoturk.com.tr, with information verifying your identity, or
• by signed letter to Ömerağa Mah. Cumhuriyet Blv. Gökseller Pasajı No: 85 A, İzmit / Kocaeli, Türkiye

Requests are answered free of charge within 30 days at the latest; if the action involves an additional cost, the fee set by the Personal Data Protection Board may apply. If you are not satisfied with the answer, you may lodge a complaint with the Board under KVKK Art. 14.